CVE-2022-20856

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability

HIGH

7.5

CVSS Score

Published: September 30, 2022 at 06:46 PM UTC

Updated: June 17, 2026 at 04:25 AM UTC

8 products affected across 1 vendorIOS XeCatalyst 9800-LCatalyst 9800-80

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error and improper management of resources related to the handling of CAPWAP Mobility messages. An attacker could exploit this vulnerability by sending crafted CAPWAP Mobility packets to an affected device. A successful exploit could allow the attacker to exhaust resources on the affected device. This would cause the device to reload, resulting in a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

17.3.4c

cisco-catalyst-9800 (environment) · cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-9800-l-c (environment) · cisco-catalyst-9800-l-f (environment)

Catalyst 9800 · Ciscodevice

80%

All versions

Catalyst 9800-40 · Ciscodevice

80%

All versions

Catalyst 9800-80 · Ciscodevice

80%

All versions

Catalyst 9800-Cl · Ciscodevice

80%

All versions